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Question: 1 


You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 hosts a virtual 
machine named VM1 that runs Windows Server 2012. VM1 has the following configuration. 


C:\>Get-VM VM1 | f1 Version, HardDrives, DynamicMemoryEnabled, Generation, MemoryStartup 
Version : 5.0 

HardDrives :{Hard drive on IDE controller number 0 at location 0} 
DynamicMemoryEnabled : False 

Generation 21 

MemoryStartup : 536870912 


C:\>Get-VMIntegrationService VM1 


VMName Name Enabled PrimaryStatusDescription SecondaryStatusDescription 
VM1 Guest Service Interface False OK 
VM1 Heartbeat False OK 
VM1 Key-Value Pair Exchange False OK 
VM1 Shutdown False OK 
VM1 Time Synchronization False OK 
VM1 VSS False OK 


You discover that when you back up Server1, VM1 temporarily pauses. 
You need to ensure that you can back up Server1 without causing downtime on VM1. 
What should you do? 


A. Increase the memory on VM1 

B. Connect the hard disk drive of VM1 to an SCSI controller 
C. Update the virtual machine version of VM1 

D. Upgrade VM1 to Windows Server 2016 

E. Enable the VSS integration service on VM1 


Answer: E 


Explanation: 
References: 


https://www.starwindsoftware.com/blog/hyper-v-backup-challenges-windows-server-2016-needs- 


to-address 


Question: 2 


You have a server named Server1 that runs Windows Server 2016. Windows Defender is enabled on 
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Server1. 

Server1 runs an application named App1 that stores various types of files in Microsoft OneDrive for 
Business, MicrosoftOneDrive, and Microsoft SharePoint Online. App1 also interacts with several local 
services. 

You need to prevent Windows Defender from scanning any files opened by App1. 

What should you do on Server1? 


A. Run the Set-ExecutionPolicy cmdlet. 

B. Run the New-AppLockerPolicy cmdlet. 

C. Modify the real-time protection settings in Windows Defender. 
D. Run the Add-MpPreference cmdlet. 


Answer: D 


Explanation: 

References: 
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender- 
antivirus/configure-process-opened-file-exclusions-windows-defender-antivirus 


Question: 3 


DRAG DROP 

Your network contains an Active Directory domain named contoso.com. The domain contains two 
servers named Serverl and Server2 that run Windows Server 2016. Server1 and Server2 have 
multiple local disks attached. 

You need to create a storage pool by using Storage Spaces Direct. 

Which three actions should you perform in sequence? To answer, move the appropriate actions from 
the list of actions to the answer area and arrange them in the correct order. 


https://www.certkillers.net 


Questions & Answers PDF Page 4 


Actions Answer Area 
From Server1, run the New- 
SpacesPool cmdlet. | 


On Server1 and Server2, install the 
Failover Clustering feature. ià 
From Server1, run the New- j 
StorageFile Server cmdlet & A 
From Server1, run the New-Cluster 
cmd © © 
On Server1 and Server2, install the 
Storage Replica feature. 


From Server1, run the Enable- 
Cluster Storage SpacesDirect cmdlet 


Answer: 


On Server1 and Server2, install the 
Failover Clustering feature. 


From Server1, run the New-Cluster 
cmdlet. 


From Server1, run the Enable- 
y Cluster Storage SpacesDirect cmdlet. 
' Í 
Explanation: 
References: 


direct 


Question: 4 


You have a Network Load Balancing (NLB) cluster that contains two nodes named Server1 and 
Server2. The nodes run Windows Server 2016. 
The NLB cluster has the following configuration. 
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ClusterName : 
IPAddress s 112.216.4221 
Name : 
ClusterIPAddress Ss LZ. Lo. 4.1 


ClusterNetworkMask : 255.255.0.0 
ClusterMacAddress : 02-bf-ac-10-04-01 


OperationMode : UNICAST 

BdaReverseHash : False 

BdaTeamActive : False 

BdaTeamiId : 

BdaTeamMaster : False 

IPAddress State Start End Protocol Mode Affinity Timeout 
All Enabled 0 65535 Both Multiple Single 0 


You deploy the Web Server (IIS) server role identically to both servers. 

You need to configure NLB to load balance requests between the web servers. HTTP requests must 
be stateless. HTTPS requests must be stateful. 

What should you do? Each correct answer presents part of the solution. 


A. Modify the Cluster operation mode. 
B. Suspend the cluster. 

C. Drainstop the cluster. 

D. Add a new port rule. 

E. Edit the existing port rule. 


Answer: CD 


Explanation: 

References: 

https://www.ntweekly.com/2017/09/04/failover-nlb-cluster-host-member 
https://docs.microsoft.com/en-us/windows-server/networking/technologies/network-load- 


balancing 


Question: 5 


HOT SPOT 

You have a server named VM1. VM1 is a virtual machine on a Hyper-V host that runs Windows Server 
2016. 

You need to create a checkpoint that includes the virtual machine memory state of VM1. 

What command should you run? To answer, select the appropriate options in the answer area. 
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Checkpoint-VM -Name VM1 -CheckpointType Production 


Get-VMSnapshot 
Set-VM 


ProductionOnly 
Standard 


-Name VM1 -SnapshotName Snapshotl 


Checkpoint-VM 
Export-VMSnapshot 
Get-VHDSnapshot 


Answer: 


Production 


Checkpoint-VM -Name VMi -CheckpointType 
Get-VMSnapshot 


Export-VMSnapshot 
Get-VHDSnapshot 


Explanation: 
References: 
https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/checkpoints 


Question: 6 


You have a server that runs Windows Server 2016 Standard. 

You create a new three-way mirror storage space. You format the storage space by using ReFS. 

Which two features can you use on the new storage space? Each correct answer presents a complete 
solution. 


A. file and folder permissions 
B. disk quotas 

C. Encrypting File System (EFS) 
D. long file names 

E. Data Deduplication 


Answer: A,E 


Question: 7 


You have four servers named Server1, Server2, Server3, and Server4 that run Windows Server 2016. 
Server1 and Server2 have the Hyper-V server role installed. Server1 hosts a virtual machine named 
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VM1. Server2 hosts a virtual machine named VM2. Server3 hosts the disks and the configurations of 
both virtual machines on an SMB share named VMShare. 

You use Server4 to manage Hyper-V operations on Server1 and Server2. 

From Server4, you attempt to perform a live migration of VM1 and VM2, but you receive the 
following error message: “No credentials are available in the security package”. 

You need to ensure that you can perform the live migration of VM1 and VM2 between Server1 and 
Server2 while signed in to Server4. 

What should you do? 


A. From Active Directory Users and Computers, modify the properties of Server4. Configure the 
delegation settings to trust the computer for delegation of cifs. 

B. From Windows PowerShell on Server3, run the remove-SMBMultiChannelConstraint cmdlet, and 
then assign Server4 Full Control permissions to VMShare. 

C. From Active Directory Users and Computers, modify the properties of Server1 and Server2. 
Configure the Delegation settings to trust the computers for delegation of the Microsoft Virtual 
System Migration Service. 

D. From Active Directory Users and Computers, modify the properties of your user account. Modify 
the Account is sensitive and cannot be delegated setting. 


Answer: C 


Explanation: 
References: 


live-migration-without-failover-clustering 


Question: 8 


You have two Hyper V hosts named Server1 and Server2 that run Windows Server 2012 R2. The 
servers are nodes in a failover cluster named Cluster1. 

You perform a rolling upgrade of the cluster nodes to Windows Server 2016. 

You need to ensure that you can implement the Virtual Machine Load Balancing feature. 

Which cmdlet should you use? 


A. Update-ClusterNetWorkNameResource 
B. Set-GusterGroupSet 

C. Update-ClusterFunctionalLevel 

D. Set-CauClosterRole 


Answer: C 


Explanation: 


rollingupgrade#cluster-os-rolling-upgrade-process 


Question: 9 
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You have a Windows Server 2016 failover Cluster named Cluster 1 that contains four nodes named 
Serverl Server2, Server3, and Serve4. 

You need to configure Cluster to use directly attached storage to store several virtual machines. 

You run the Enable-ClusterStorageSpacesDirect cmdlet on Server1. 

What should you do next? 


A. Run the Enable-ClusterStorageSpacesDirect cmdlet on the other three nodes. 
B. Create volumes. 

C. Create storage pool. 

D. Add-ClustcrResource mdlet on all of the nodes. 


Answer: B 


Explanation: 
References: 


windows-server-2016-4d2be85a8f7d"'d 


Question: 10 


You have a Hyper-V host named Server1 that runs Windows Server 2016. Server1 hosts a virtual 
machine named VM1 that runs Windows Server 2016. 

On VM1, Dynamic Memory is disabled, MAC spoofing is enabled for the virtual network adapter, and 
checkpoints are disabled. You need to ensure that you can install the Hyper-V server role on VM1. 
What should you do? 


A. Shut down VM1, enable Dynamic Memory on VM1 and then start VM1. 
B. Configure VM1 to use standard checkpoints. 

C. Disable Hyper-V integration services for VM1 and then restarts VM1. 

D. Shut down VMI, run the Set-VMProcessor cmdlet and then start VM1. 


Answer: D 


Explanation: 
References: 


https://docs.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/nested- 


virtualization 


Question: 11 


You have a server named Server1 that runs Windows Server 2016 and has the File and Storage 
Services server role installed. Server1 has an ReFS-formatted volume named Volume! that is 512 GB. 
Volume1 is mounted as C:\App1i\temp. You need to ensure that you can enable deduplication of 
Volume1. What should you do? 
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A. Initialize the physical disk that contains Volume1. 
B. Install a Windows feature. 

C. Format Volume1. 

D. Unmount Volumet1. 


Answer: B 


Explanation: 
References: 


https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview 


Question: 12 


You plan to deploy three servers that will run Windows Server 2016. The servers will be configured as 
shown in the following table. 


Hard disk configuration 


Serverl 250-GB, NTFS-formatted 
4-TB, ReFS-formatted 


Server2 1-TB, NTFS-formatted 
2-TB, NTFS-—formatted 
500-GB, exFAT-formatted 

Server3 8-TB, NTFS-formatted 
2-TB, ReFS-formatted 
1-TB, ReFS-formatted 


You need to ensure that you can use all of the available space on each disk. 


What is one of the disks that you must initialize as a GPT disk? 


A. Disk2 on Server3 
B. Disk1 on Server2 
C. Disk3 on Server2 
D. Disk1 on Sever3 


Answer: D 


Question: 13 


You have a server named Server 1 that runs Windows Server 2016 Window, Defender is enabled on 
Server1. 
Server1 runs an application named App that stores various types of files in Microsoft OneDrive for 
Business, Microsoft OneDrive, and Microsoft SharePoint Online. Appt also Interacts with several local 
services, 
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You need to prevent Windows Defender from scanning any files opened by Appl. 
Should you do on Server1? 


A. Run the Set-ExecutionPolicy cmdlet 

B. Form the Windows Defender settings, configure a file exclusion. 

C. From the Windows Defender settings, configure a process exclusion. 
D. Modify the cloud-based protection settings in Windows Defender. 


Answer: B 


Explanation: 
References: 


https://www.windowscentral.com/how-exclude-files-and-folders-windows-defender-antivirus-scans 


Question: 14 


You have a server named Server1 that runs Windows Server 2016. Windows Defender is enabled on 
Server1. 

Server1 runs an application named App1 that stores various types of files in Microsoft OneDrive for 
Business, MicrosoftOneDrive, and Microsoft SharePoint Online. App1 also interacts with several local 
services. 

You need to prevent Windows Defender from scanning any files opened by App1. 

What should you do on Server1? 


A. From the Windows Defender settings, configure a file exclusion. 

B. Run the New-CiPolicy cmdlet. 

C. Modify the real-time protection settings in Windows Defender. 

D. From the Windows Defender settings, configure a process exclusion. 


Answer: A 


Question: 15 


DRAG DROP 

Your network contains an Active Directory domain named adatim.com. The domain contains four 
member servers that run Windows Server 2016. 

On each server, you locally attach three disks and install the Failover Clustering feature. 

You need to create a volume that uses all the disks. The volume must be highly available. 

Which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the 
list of cmdlets to the answer area and arrange them in the correct order. 
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Answer Area 
New-Cluster 
Initialize-Disk 


Enable-VMReplication 


ll 


Enable-ClusterS2D 


New-Volume 


New-Partition 


Answer: 


Answer Area 


New-Cluster 


Enable-ClusterS2D 


New-Volume 


OY 


Question: 16 


You have a Hyper-V server named Server1 that runs Windows Server 2012 R2. 

Server1 hosts a virtual machine named VM1 that runs Windows Server 2016. VM1 connects to an 
external virtual switch named Switch1. 

You can ping VM1 from Server. 

You upgrade Server1 to Windows Server 2016. 

You need to ensure that you can connect to VM1 by using PowerShell Direct. 

What should you do? 


A. Configure the firewall rules on Servert1. 

B. Enable the Hyper-V extensible switch extensions on Server1. 
C. Upgrade the configuration version of VM1. 

D. Configure the firewall rules on VM1. 
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Answer: C 


Question: 17 


You have a Nano Server named Nano1. 

Nano1 is configured to perform real-time protection scans by using Windows Defender. 

You need to ensure that all of the files located in D:\App1\Data are excluded from the real-time 
protection scans. 

What should you do? 


A. From the properties of D:\App1\Data folder, modify the permissions. 

B. Run the Set-MpPreference cmdlet and specify the —ExclusionPath parameter. 

C. From a command prompt, run the attrib command and specify the -s parameter. 
D. Run the Get-Childltem cmdlet and specify the -Exclude parameter. 


Answer: B 
Explanation: 
The Set-MpPreference cmdlet configures preferences for Windows Defender scans and updates. 
Explanation: 
References: 


https://docs.microsoft.com/en-us/powershell/module/defender/set-mppreference ?view=win10-ps 


Question: 18 


HOT SPOT 

Your network contains an Active Directory forest The forest contains two domain controllers named 
DC1 and DC2 that run Windows Server 2016. DC1 holds all of the operations master roles. 

DC1 experiences a hardware failure 

You plan to use an automated process that will create 1000 user accounts 

You need to ensure that the automated process can complete successfully 

Which command should you run? To answer, select the appropriate options in the answer area 


[V] -identity “DC2" -OperationMasterRole [v] L [V] 


Move-ADDirectoryServerOperatinMasterRole POCEmutator Seize pdc 
nidsutil InfrastructureMaster -Force 
RIDMaster 


SchemaMaster 


Answer: 
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-identity “DC2”" —OperationMasterRole [v] [v] 


ove-ADDirectoryServerOperatinMasterRole PDCEmulator eize pd 
nasut ; [Force  — | 
RiDMaster 
emaly er 


Question: 19 


HOT SPOT 

Your network contains an Active Directory forest The forest contains one domain named 
contoso.com. The domain contains two domain controllers named DC1 and DC2. DC1 holds all of the 
operations master roles. 

During normal network operations, you run the following commands on DC2: 
Move-ADDirectoryServerOperationMasterRole -Identity "DC2" -OperationMasterRole PDCEmulator 
Move-ADDirectoryServerOperationMasterRole -Identity "DC2" -OperationMasterRole RIDMaster 
DC1 fails. 

You remove DC1 from the network, and then you run the following command: 
Move-ADDirectoryServerOperationMasterRole -Identity "DC2" -OperationMasterRole SchemaMaster 
For each of the following statements, select Yes if the statement is true. Otherwise, select No 


Statements Yes No 


os holds the schema master operations 
role. 


DC2 holds the PDC emulator master 
operations role 


Currently, you can add additional 
domains to the forest 


Answer: 
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Statements Yes No 


nag holds the schema master operations [o] 
| role, 


DC2 holds the PDC emulator master a 
operations role 


Currently, you can add additional 
domains to the forest. [oJ 


Question: 20 


DRAG DROP 

You install a new Nano Server named Nano1. Nano1 is a member of a workgroup and has an IP 
address of 192 1698 1.10. 

You have a server named Server1 that runs Windows Server 2016. 

From Server1, you need to establish a Windows PowerShell session to Nano1. 

How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the 
correct targets Each cmdlet may be used once, more than once, or not at all. You may need to drag 
the split bar between panes or scroll to view content. 


Sip = “192.168.1.10" 


nter-PSSession $user = “Administrator” 


WSMan:\localhostiClient\TrustedHosts 
“492.168.1.10" 
[i -ComputerName Sip -Credential $user 


Answer: 
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Enable-PSRemoting 
$ip = “192.168.1.10” 


Enter-PSSession $user = “Administrator” 


. WSMan:\localhost\Client\TrustedHosts 
Set-ttom “192.168.1.10” 


Set-item 


Enter-PSSession -ComputerName $ip -Credential $user 


Set-ItemProperty 


Set-LocalUser 


Question: 21 


HOT SPOT 

Your network contains an Active Directory domain named contoso com. The domain contains a DNS 
server named Server1 

Server1 configured to use a forwarder named server2.contoso.com that has an IP address of 
10.0.0.10. 

You need to prevent Server1 from using root hints if the forwarder is unavailable. 

What command should you run? To answer, select the appropriate options in the answer area 


DAN | M 


Suspend-DnsServerZone -Name *.* -PassThru 
Set-DnsServer -IPAddress 10.0.010 
Set-DnsServerForwarder -NameServer server2.contoso.com 
Set-DnsServerRootHint -UseRootHints. $false 

Answer: 


| 


Suspend-DnsServerZone -Name “*." -PassThru 
ot-DnsServe -IPAddress 10.0.010 
-NameServer server 


sheate : 2 `C z 
UseRootHints. Sfalse 


ontoso.com 


Question: 22 


You have a Nano Server named Nano1. 

Which cmdlet should you use to identify whether the DNS Server role is installed on Nano1? 
A.Find-NanoServerPackage 

B.Get-Package 
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C. Find-Package 
D. Get-WindowsOptionalFeature 


Answer: B 


Question: 23 


HOT SPOT 

Your network contains an Active Directory forest The forest contains two sites named Site1 and Site2. 
Site1 contains 10 domain controllers Site1 and Site2 connect to each other by using a WAN link 

You run the Active Directory Domain Services Configuration Wizard as shown in the following 
graphic. 


Server3 is the only server in Site2 
Use the drop-down menus to select the answer choice that completes each statement based on the 
information graphic. 


Questions & Answers PDF 


Members of the Site2 Admins group will be able to [answer 
choice] on Server 3 


If the WAN link fails, users who are members of the Allowed 
RODC Password Replication Group [answer choice] in Site2. 


Members of the Site2 Admins group will be able to [answer 
choice] on Server 3. 


If the WAN link fails, users who are members of the Allowed 
RODC Password Replication Group [answer choice] in Site2 


Question: 24 


Page 17 


make updates to SYSVOL content 
manage the password replication polilor 
ADDS) start Active Directory Domain Services 


== [v] 


will be prevented from logging on 
will log on with reduced security ri 


hts 
can log on if they have previously fogged on 


Answer: 


make updates to SYSVOL content 


$ i ‘Org D nN OO 
AD DS 


[v] 


will be prevented from logging on 


You deploy a Hyper-V server named Served in an isolated test environment The test environment is 
prevented from accessing the Internet Server1 runs the Datacenter edition of Windows Server 2016. 
You plan to deploy the following guest virtual machines on the server 


Quantity | Operating system | Domain member | 
10 | Windows Server 2012 R2 


Windows Server 2016 
|S | Windows Server 2016 


Which activation model should you use for the virtual machines'? 


A.Multiple Activation Key (MAK) 

B.Automatic Virtual Machine Activation (AVMA) 
C. Original Equipment Manufacturer (OEM) key 
D. Key Management Service (KMS) 


https: 


Answer: B 
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Question: 25 


HOT SPOT 

Your network contains an Active Directory domain named contoso com. The domain contains a DNS 
server named Server1 

You enable Response Rate Limiting on Server1. 

You need to prevent Response Rate Limiting from applying to hosts that reside on the network of 
10.0.0.0/24. 

Which cmdlets should you run? To answer, select the appropriate options in the answer area 


First cmdlet to run: IV | 


Add-DnsServerClientSubnet 
Enable-DnsServerPolicy 
Set-DnsServerResponseRateLimiting 
Set-DnsServerResponseRateLimitingExceptionlist 


Second cmdlet to run: [v] 


Add- DnsServerResponseRateLimitingExceptionlist 
Add-DnsServerQueryResolutionPolicy 
Add-DnsServerZoneScope 

Set-DnsServerDsSetting 


Answer: 
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First cmdlet to run: 


p. — 
| Add-DnsServerClien subnet 


Set-DnsServerResponseRateLimiting 
Set-DnsServerResponseRateLimitingExceptionlist 


Second cmdlet to run: [v] 


Add-DnsServerZone Scope 
Set-DnsServerDsSetting 
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